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1 Introduction 

One of two most famous quantum algorithms is Grover's search [15] which solves a generic 
problem of exhaustive search among N possibilities in 0{-\fN) steps. This provides a quadratic 
speedup over the naive classical algorithm for a variety of search problems [3] . 

Grover's algorithm can be re-cast as computing OR of N bits x\, . . . , xn, with 0(^/N) 
queries to a black box storing the values x\,... ,xn- Then, a natural generalization of this 
problem is computing the value of an AND-OR formula of xi, . . . , xn- 

This problem can be viewed as a black-box model for determining the winner in a 2-player 
game (such as chess) if both players play their optimal strategies. In this case, the game can be 
represented by a game tree consisting of possible positions. The leaves of a tree correspond to 
the possible end positions of the game. Each of them contains a variable Xi, with x, = 1 if the 
first player wins and Xi = otherwise. Internal nodes corresponding to positions which the first 
player makes the next move contain a value that is OR of the values of their children. (The first 
player wins if he has a move that leads to a position from which he can win.) Internal nodes 
for which the second player makes the next move contain a value that is AND of the values of 
their children. (The first player wins if he wins for any possible move of the second player.) 

The question is: assuming we have no further information about the game beyond the 
position tree, how many of the variables Xi do we have to examine to determine whether the 
first player has a winning strategy? This problem has been studied in both classical [2Ql UHl |2T] 
and quantum (HEHHHH] context. 

Throughout this paper, we will assume that the formula is read-once (every leaf contains a 
different variable). There are two main cases that have been studied in the quantum case. 

The first case is when the formula is of a constant depth d. If the formula is balanced (which 
is the most commonly studied case), then even levels contain ORs of N 1 ^ variables and odd 
levels contain ANDs of N 1 ^ variables. In this case, Q(VN) quantum queries are both sufficient 
[51 116) and necessary [3J. Since any randomized algorithm requires f2(iV) queries in this case, 
we still achieve a quadratic speedup over the best classical algorithm. For arbitrary formulas of 
depth d, 0(VN log*- 1 N) queries suffice [5]. This is almost tight, as Barnum and Saks [7] have 
shown that Q(y/N) queries are necessary to evaluate any AND-OR formula of any depth. 
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The second case is when, instead of a constant depth, we have a constant fan-out. This 
case has been much harder and, until a few months ago, there has been no progress on it at 
all. If we restrict to binary AND-OR trees, the classical complexity of computing the value of 
a balanced binary AND-OR tree is Q(N - 754 — ) [30] [Jj|] [2T] and there was no better quantum 
algorithm known. 

In a breakthrough result, Farhi et al. [14] showed that the value of a balanced binary 
NAND tree can be computed in 0(yN) quantum time in an unconventional continuous-time 
Hamiltonian query model of [T2] [TH]. (Because of De Morgan's laws, computing the value of 
an AND-OR tree is equivalent to computing the value of a NAND tree.) Using a standard 
reduction between continuous time and discrete time quantum computation [10] , this yields an 
0(iW 2+e ) query quantum algorithm in the standard discrete time quantum query model, for 
any e > 0. (The big-0 constant deteriorates, as the e decreases.) 

Soon after, Childs et al. [IT] extended the result of [!14 to computing the value of an arbitrary 
binary NAND tree of depth in time 0(V Nd) in the continuous-time Hamiltonian query model 
and with 0{N 1 l 2+t ) queries in the discrete-time query model. 

In this paper, we improve over |14] and [11] by giving a better discrete time quantum query 
algorithms for both balanced and general NAND trees. Namely, we give 

1. An 0(y~N) query quantum algorithm for evaluating balanced binary NAND formulas, 
which is optimal up to a constant factor. 

2. An 0(V Nd) query quantum algorithm for evaluating arbitrary binary NAND formulas of 
depth d. 

l-l_r)( _J ) 

3. An 0(N 2 \AogJv ) query quantum algorithm for evaluating arbitrary binary NAND 
formulas of any depth. 

All of our algorithms are designed directly in the discrete quantum query model and do not 
incur the overhead from converting from continuous to discrete time. 

Besides better running time, our algorithms provide a new perspective for understanding 
the quantum algorithms for this problem. When the breakthrough algorithm of [14j appeared, 
its ideas seemed to be very different from anything known before. Our new algorithm and its 
analysis show intricate connections to the previous work on quantum search. 

Although its technical details are complex, the main intuition is the same as in Grover's 
search [15] and its "two reflections" analysis [JJ which views the Grover's algorithm as a sequence 
of reflections in two-dimensional space against two different axes. The idea of " two reflections" 
has come up in quantum algorithms over and over. For example, the element distinctness 
algorithm of [I], designed by different methods, was re-cast in the form of two reflections by 
Szegedy [22]. In this paper, we show that the NAND-tree algorithms can be viewed as another 
instance of " two-reflections" , with the reflections designed, using the structure of the NAND 
tree. 

2 Preliminaries 

2.1 Quantum query model 

We work in the standard discrete time quantum query model [3] [H] • In this model, the input 
bits can be accessed by queries to an oracle X and the complexity of / is the number of queries 
needed to compute /. A quantum computation with T queries is just a sequence of unitary 
transformations 

Vb->0->Vi->0->...-> Vr-i -^O^V T . 

The Vj's can be arbitrary unitary transformations that do not depend on the input bits 
X\, . . . , xj\f. The O's are query (oracle) transformations which depend on x\, . . . , xn ■ To define 
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O, we represent basis states as \i, z) where i € {0, 1, . . . , N}. The query transformation O x 
(where x = (xi, . . . , xn)) maps |0, z) to |0, z) and \i, z) to (— l)^^ |i, z) for j S {1, N} (i.e., we 
change phase depending on Xi, unless i — in which case we do nothing). 

The computation starts with a state |0). Then, we apply Vo, O x , . . ., O x , Vt and measure the 
final state. The result of the computation is the rightmost bit of the result of the measurement. 
A quantum algorithm computes a function f(x±, . . . , xn) if, for any x\, . . . , xn € {0, 1}, the 
probability that the result of the measurement is equal to f(x\, . . . , xn) is at least 2/3. 

We will describe our algorithm in a high level language but it can be translated into a 
sequence of transformations of this form. 

2.2 Phase estimation 

In our algorithm, we use phase estimation [12 . Assume that we are given a black box performing 
a unitary transformation U and a state \ip) which is an eigenstate of U: U\ip) = e te \ip). Our goal 
is to obtain an estimate such that \0 — 9\ < S with probability at least 1 — e. The algorithm 
for phase estimation by [T^] solves this problem by invoking U O(j^) times. 

If the input to this algorithm is a state \tp) that is a linear combination of different eigen- 
states: = J2j a j\i } j) w i tn Ui\tjjj) = e l6j \ipj), then the algorithm works as if the input was a 
probabilistic combination of \ipj) with probabilities \aj\ 2 . 

3 Summary of results and methods 
3.1 Results 

Let T be a read-once binary NAND formula involving variables x\,X2, ■ ■ - , xn ■ We can represent 
T by a tree that have variables X\, . . . , xn at the leaves and NAND gates at the internal nodes. 
Let d be the depth of T. We have 

Theorem 1 l.IfT is the complete binary tree, then T(x\, . . . , xn) can be computed with 
0(\HV) quantum queries. 

2. For any binary tree T, T(xx, . . . ,xjv) can be computed with 0(V dN) quantum queries. 

We refer to the first part of the theorem as the balanced case and to the second part as the 
general case. 

Bshouty et al. [B] have shown 

Theorem 2 ftjjj For any NAND formula T of size S , there exists a NAND formula T' of size 
S' = 0(S 1+O( and depth d = 0(S° { V^ ] ) such that V = T. 



This theorem follows by substituting k — 2 V lo s s into Theorem 6 of |6J. By combining 
Theorems Q] and [2] we have 

1 | r\( 1 j 

Corollary 1 For anyT ,T(x\, . . . ,xn) can be computed with 0(N N ) quantum queries. 

If the formula T is not read once, the number of variables N is replaced by the size of the 
formula S. This gives us 

Corollary 2 IfT(x\, . . . , xjv) is computable by a NAND formula of size S, T is computable by 

1 | r*( 1 ) 

a quantum query algorithm with 0(S 2 V lo <s s ) queries. 
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The link between quantum query complexity and formula size was first noticed by Laplantc 
et al. [17j who observed that, whenever quantum adversary lower bound method of [2] gives 
a lower bound of fi(M) for quantum query algorithms, it also gives a lower bound of fl(M 2 ) 
for formula size. Based on that, they conjectured that any Boolean function with formula size 
M 2 has a quantum query algorithm with 0(\^M) queries. The results in [11] and this paper 
show that it is indeed possible to transform an arbitrary NAND formula into a quantum query 
algorithm, with almost a quadratic relation between formula size and the number of queries. 

3.2 The algorithm 

Our algorithm is the same for both parts of Theorem [3l Without the loss of generality, assume 
that all leafs are at an even distance from the root. (If there is a leaf I at an odd depth, create 
two new vertices v±,V2 and connect them to I, making I an internal node. Vi,V2 are now leaves 
at an even depth. If x, is the variable that used to be at the leaf I, replace it by two new 
variables at leaves V\,V2 and make both of those equal to NOTxi. Then, the NAND of those 
two variables at the vertex I will evaluate to Xj.) 



12 t-1 t 
• • ... • • 

Tail 



Tree 

Figure 1: A tree T, augmented by a tail. 

We augment the tree T by a "tail" of an even length t where t — 2[V r /V] in the balanced 
case and t = 2\y/Nd\ in the general case. The tail is a path that starts at the root of T and 
then goes through t newly created vertices. T' denotes the tree T, augmented by the tail (see 
Figure [T]). 

Our state space Tt will be spanned by basis states \v) corresponding to vertices of T". We 
use \i) (for i = 0, . . . , t) to denote the basis state corresponding to the i th vertex in the tail of 
T' , |0) corresponds to the root of T. 

We define a Hermitian matrix H as follows: 

1. If pc is an edge in T from a parent p to a child c, then H pc = H cp = ^/^f- if P is at an odd 

level and H pc — H cp — \J^^ if P is at an even level. (When T is the complete balanced 
tree, this becomes H cp = H pc = 1.) 

2. If uv is an edge in the tail, then H uv = H vu = 1. 

3. If uv is not an edge, then H uv = H vu = 0. 

Then, H is a Hermitian operator acting on TL. Let Sh,o b e the 0-eigenspace of H, Sh,i = 
(Sha)- 1 and let U x be defined by Ui\tp) = for \ip) G S H [o and Ui\ip) = -\ip) for |^) € S H ,i- 

Let U~2 be defined by U2\ip) — —\i>) if IV') belongs to the subspace S x> i spanned by basis 
states \v) that correspond to leaves containing variables Xi = 1 and U2W) = \ip) if \ip) belongs 
to the subspace S x ,o spanned by all other basis states \v). 
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U2 can be implemented with one query O. (It is essentially the query transformation O x , 
with basis states labelled in a different way.) U% is independent of xi, . . . , xn and can be 
implemented without using the query transformation O. 



Theorem 3 1. If T evaluates to 0, there is a state \i))q) such that UiUi\ipo) = \ipo) and 
\(if>o\ip start) \ — c f or some constant c > 0. 
2. IfT evaluates to 1, then, for any eigenstate jV'o) ofU^Ui which is not orthogonal to \ip"t art ), 
the corresponding eigenvalue of U2U1 is e %e , with 9 = f2(-^=) for any T and 9 = Q(-j=) 
when T is the complete balanced tree. 

We can distinguish the two cases by running the eigenvalue estimation for TJ%U\, with \tp start) 
as the starting state, precision S = 6 "^ in where 9 m i n is the lower bound on 9 from the second 
part of Theorem [3] {9 m i n — 6(-^=) or # mi „ = 6(— i=)) and error probability e < |. In the first 



with probability at least (1 — e)c. 

In the second case, if we write out \il>start) as a linear combination of eigenvectors of U2U1, 
all of those eigenvectors have eigenvalues that are e lB , 9 > 9 m i n . Therefore, the probability of 
the eigenvalue estimation outputting an estimate 9 < 9 m in — 8 = is at most e. 

By our choice of e, we have (1 — e)c > e. We can distinguish the two cases with arbitrarily 
high probability, by repeating the eigenvalue estimation C times, for a sufficiently large constant 



3.3 Proof overview 

The first part of Theorem[3]is proven by constructing the state IV'o)- For the second part, we 
show that the entire state-space TL can be expressed as a direct sum of one-dimensional and 
two-dimensional subspaces, with each subspace being mapped to itself by U\ and U2- Each one- 
dimensional subspace consists of all multiples of some state \ijj), with Ui\tp) and L^IV') being 
either \ip) or — \ip). Therefore, we either have t^filV') — \4 ) ) or ^ r 2^i|'0) = — H 1 )- We show 
that, if U2Ui\il)) — then \ip) is orthogonal to the starting state \ip's tart ) and, therefore, has 
no effect on the algorithm. 

For two-dimensional subspaces, we show that each of them has an orthonormal basis \tpn), 
I "012 } such that Ui\ipn) = \ij)\±) andJ7i|V'i2) = — IV'12) and another orthonormal basis |"02i), IV'22) 
such that C/2 1 "021 ) = |"02i) and C/2 1^22) = —^22)- Then, on this two-dimensional subspace, U2U1 
is a product of two reflections, one w.r.t. \ipu) and one w.r.t. \"ip2i)- As in "two reflections" 
analysis PQ of Grover's search, a product of two reflections in a two-dimensional plane is a 
rotation of plane by 2/3, where (3 is the angle between \ipn) and |^2i)- A rotation of the plane 
by 2(3 has eigenvalues e ±l13 . Therefore, we need to lower-bound (3. 

Since ^21) and IV'22) are orthogonal, the angle between l^n) and ^22) is § — [3. Therefore, 
I ("022 1 ) I — sin/3. Since \1p22) belongs to S Xt i and IV'n) belongs to Sh,o, we have 





C. 



\{^ix)\ = \\Ps x ,Mn)\\ > , ,min \\P Sm Ml 



Therefore, to lower-bound sin/3 and /3, it suffices to lower-bound the minimum of ||Ps x 1 \ip)\\ for 
IV 1 ) G Sh.o- We do that by an induction over the depth of the tree. 
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4 Notation 



In this section, we summarize the main notation used in this paper: 

Trees. T is the tree which we are evaluating. T" is the tree T with the tail attached to it. 
T v is the subtree of T rooted at v. We also use T (or T v ) to denote the Boolean function defined 
by evaluating the NAND tree T (or T v ). 

m v and d v denote the number of leaves and the depth of T v . r denotes the root of T, Thus, 
T r = T. 

Matrices. H is the weighted version of the adjacency matrix of T', defined in section I3T21 
H v is the restriction of H to rows and columns in T v . 

Subspaces. Sh.o is the eigenspace of H with the eigenvalue 0. Sh,i is the orthogonal 
complement of Sh.o- Sh,i = {Sh.o)^- Sv,o denotes the 0-eigenspace of H v . S' H and S' v are 
subspaces of Sh.o and S v> o, defined in section [7] 

S x> i is the subspace spanned by \v), for all leaves v that correspond to a variable x.- L = 1. 
S Xt o is the subspace spanned by all other \v) (for v that are either leaves corresponding to x% — 
or non- leaves). 

Unitary transformations XJ\ is defined by Ui\ip) = for \ijj) € Sh,o and Ui\tp) = 
for \ip) G Sh,i- U2 is the query transformation. It can be equivalently described by defining 
U 2 \ip) = for |^) G S Xt o and U a \i/>) = -\i/>) for |^) G S X}1 . 

5 Structure of minimal certificates of T v 

Let C be a minimal certificate of T v = 0. We would like to determine the structure of C. Let 
Z\ and Z2 be the two children of v and yi, j/2 (U3, Vi) be the children of Z\ (Z2, respectively). 
For T v = 0, we need to have T Zl = T Z2 — 1 which is equivalent to at least one of T yi and T V2 
and at least one of T ya and T Vi evaluates to 0. Thus, a minimal 0-certificate for T v consists of 
a minimal 0-certificate for one of T yi = and T y . 2 = and a minimal 0-certificate for one of 
T ya = and T Vi — 0. Each of those 0-certificates can be decomposed in a similar way. 








Figure 2: An extended certificate for T v = 0. 

We now define an extended minimal certificate for T v = to consist of v, an extended 
minimal certificate for one of T Vl = and T V2 — and an extended minimal 0-certificate for 
one of Ty 3 — and T Vi = 0. Intuitively, an extended minimal certificate is a minimal certificate, 
augmented by non-leaf vertices that must evaluate to on this certificate. We can show 

Lemma 1 Let C be an extended minimal certificate. If a non-leaf vertex w belongs to C , Z\ 
and Z2 are the two children of w and yi, y 2 (J/3, are the children of Z\ (z 2 , respectively), 
then exactly one ofyi,y2 and exactly one of y3,y4 belongs to C. 
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Proof: In appendix [XJ | 

We show an example of an extended certificate for T v — in figure [5] The vertices that 
belong to the extended certificate are shown by squares. 

For each extended minimal certificate C of T v = 0, we can define a state \ipc) that nas 
non-zero amplitudes only in the vertices of C, in a following way: 

1. Decompose C as C = C Vi U C y . U {v}, where C Vi is an extended certificate for T Vi = 0, 
i G {1, 2} and C y . is an extended certificate for T y . = 0, j G {3, 4}. 

2. Construct |V , C„.) and |V>C„.) inductively and define 

|^> = |«> - -^pM^cJ - !&^>- (1) 

Lemma 2 Lei C be an extended minimal certificate for T v = 0. Then, 

H v \^ c ) = 0. 

Proof: In appendix [XI | 

Lemma 3 (a) If T is balanced, HV'cJI 2 < 2^/m v — 1. 

f6j For any T , ||^c„|| — ^V m vd v - 
Proof: In appendix [XI | 



6 Proof of Theorem 1: T = case 

Let C be an extended minimal 0-certificate of T r where r is the root of the tree and let \if>c) 
be the corresponding state (defined so that the amplitude a r of the root is 1). We define 
|-0o) = IV'c) + J2l=i(~ 1)* 1 2z) . Let |^o) be the corresponding normalized state: \tp' ) = thctt- 

We claim that U2Ui\ipo) — IV'o)- This follows from l^l^) = (which is true, because \ipc) 
and \ipo) are only non-zero on the vertices that belong to the extended certificate C and X4 = 
for all variables Xi at the leaves that belong to a certificate C) and Ui\tpo) = \ipo) (which follows 
from the next lemma). 

Lemma 4 



H\iM = 0. 

Proof: It suffices to show that, for every u, the amplitude of u in H \ipo) is 0. For vertices in the 
tree T, their amplitudes in H\ipo) are the same as their amplitudes in H T \ij)c) and, by Lemma 

m hmc) = 0. 

For vertices j in the tail, the amplitude of j in H\ipo) is the sum of the amplitudes of its 
two neighbors of j — 1 and j + 1 in IV'o)- If j = 2z is even, then both 2i — 1 and 2i + 1 have 
amplitudes and their sum is 0. If j = 2i + 1 is odd, then one of 2i and 2i + 2 has amplitude 1 
and the other has amplitude -1, resulting in the sum of amplitudes being 0. | 

To complete the proof of the first part of Theorem [31 we show 

Lemma 5 If t > ^/N (for the balanced case) or t > \J Nd (for the unbalanced case), then 
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Proof: We show the proof for the balanced case. (For the unbalanced case, just replace N by 
Nd everywhere.) 

Since \tp' ) € Sh.o (by Lemma 0}, we have 

(VolVW*) = W>\Ps B ,o\1>«art) = WstartWoWLrt) < WLrt) ■ 

Therefore, it suffices to prove (r/j' Q \ i/i start) > r^- We have 

IIV>o|| 

Since each of the basis states \2j) has amplitude 1 in \ipo) and amplitude /I +1 m VPstart), we 



have {ipo\i> start) = y| + 1. We also have 



l^oir-||V'cl| 2 + ^<2ViV+^<2.5i. 



Therefore, 



(V>olVwt) V 2 + 1 _ l 



||^0 1| " y/2M y/b' 
I 

(ipblii'start) can be increased to 1 — e by taking i > C^/N for sufficiently large constant C. 



7 Proof of Theorem 1: T = 1 case 
7.1 Overview 

We first describe a subset of the 1-eigenstates \ip) of U2U1. Let u be a vertex of an odd depth 2j+l 
and let ui and V2 be the children of v. Assume that T V1 = T V2 = and let Ci, C2 be the extended 
minimal certificates for T Vl = and T V2 = 0. Define \ipCi,c a ) = ■\J m v\ IV'Ci) — ^w^7|'0c 2 ). 

Lemma 6 £/ 2 |^Ci,c 2 ) = ^i|^d,c 2 ) = l"0Ci,c 2 )- 

Proof: In appendix IA1 | 

We define S' H to be the subspace spanned by all \tpCx,c 2 ), f° r au possible choices of v, C\ 
and C2. Observe that S' H is orthogonal to the starting state |^ s tort) (since the state IV'start) 
only has non-zero amplitude on the root and in the tail and any of the states \ipCi,c 2 ) always has 
zero amplitudes there). Since S' H0 Q Sh,o, S'hq ^ s a l so orthogonal to \ip' start ) = Ps H a\i> 'start) 

and |^ tart ) = 

Theorem [3] follows from the following two lemmas: 

Lemma 7 Let S be a Hilbert space, let S\,S2 be two subspaces of S and let Ui (i £ {1,2}) 
be the unitary transformation on S defined by Ui\ijj) = —\ip) for \ip) 6 Si and Ui\ip) = \ip) for 
\tp) G {Si)" 1 - Assume that Si H S2 = { } and, for any \ip) £ Si, we have 

\\P {S2) ^)\\ 2 > ^ 
Then, all eigenvalues of U2U1 are of the form e lS with 8 E [y/e, 2tt — 

Lemma 8 For any state \ip) E Sh,o H (S' ho ) , \\Ps x ilV^II 2 > C IIV-'I| 2 f or a constant c, where 
c = Q(jj) in the balanced case and c — Sl(-J-j) in the general case. 
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Given the two lemmas, the proof of Theorem is completed as follows. Define S — (S' H ) n 
(S H ,i n S^i)- 1 . For both S' H0 and S H ,i H S^i, C/i and U 2 map those subspaces to themselves. 
Since U\ and are unitary, this means that U± and U2 map 5 to itself, as well. Combining 
Lemma [7] and [8] implies that all eigenvalues of U2U1 on S are e l8 with 8 G [5, 27r — <5], with 
(5 = f2(— J=) in the balanced case and i5 = Sl(-J=) in the general case. 

Since S' H and Sh,i are both orthogonal to \ ip's tart ) , the state \ip" tart ) belongs to S. Therefore, 
all eigenvectors of U 2 U\ which are not orthogonal to \tp" tart ) must lie in S and, therefore, have 
eigenvalues e 10 of the required form. This completes the proof of the theorem. 

Lemma [7] is fairly similar to previous work. We give its proof in Appendix [B] In the 
next section, we give the proof of Lemma [3 postponing some of the technical details till the 
appendices. 



7.2 Proof of Lemma [8] 

This lemma is equivalent to the next one. 

Lemma 9 For any state G Sh,o> there exists a state G S' H such that 

\\ps*AW) + m)\\ 2 >4m + m\\ 2 

for a constant c, where c = fl(jj) in the balanced case and c — f2(-^) in the general case. 

Proof: [of Lemma [8] By construction of S' H , any state in S' H is orthogonal to S Xi \. Let 
\ip) G Sh n (S'^ ) ± . We use Lemma|H]to obtain \ip'} G S' H . Then, we have 

ll^»|| 2 = \\Ps., 1 ty + 1>') II 2 > 4i> + ^'ll 2 = cW\ 2 + cW\\ 2 > cUf, 

with the first equality following from \ip') being orthogonal to S Xt i, the second inequality from 
lemma |9]and the the third equality following from being orthogonal to \ip') (which is true 
because \ip') G S' H but \tp) G (S^ ^). | 

Proof: [of Lemma [5] We recall that S Vt o is the O-eigenspace of H v . We define S' v to be the 
subspace spanned by all \ipCi,c 2 ) which only have non-zero amplitudes for \u), u G T v . Then, 
we have S' v C S Vi q. 

For a state we define 

MVO = i T5 



where a„ is the amplitude of v of in |^) and if will be defined later. 

The next lemma is slightly different for balanced NAND trees and general NAND trees. 
Below is the variant for balanced trees. The counterpart for general trees is described in appendix 

El 

Lemma 10 Let K > 20A and let v be a vertex at depth 2k. For any state \ip) G S v q, there 
exists a state \ip') G S' v such that, for = \ip) + \ip'), we have 

1. IfT k (x 1 ,...,x N ) = 0, then 

( 2 2k \ 
L v (^)<a v , a v = (l + 2— J (2 k+1 - 1). 

2. IfT k (x 1 ,...,x N ) = l, then 



)2A- 



L,[r] - _/ '"' ''' = > 1 2= k) W 
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Given LemmalTOl the proof of Lemma[9] can be completed as follows. Let be a O-eigenstate 
of H. Then, we can decompose \ip) — \iptree) + \ikail), with \iptree) being a superposition over 
vertices in T (including the root) and \iptail) being a superposition over vertices in the tail. 

Let a r be the amplitude of the root in \tp). In both balanced and general case, we have 

Lemma 11 Let \ip) = ^2 u a u \u) be a O-eigenstate of H (or H v , for some v). Then, any vertex 
u of an odd depth (or any u in the tail at an odd distance from the root) must have a u = 0. 

Proof: In appendix 1X1 | 

By this lemma, H\ip) = implies that the amplitudes of the vertices in the tail at an odd 
distance from the root are 0. Also, to achieve H\ip) = 0, the amplitudes at an even distance 
from the root must be ±a r . Therefore, H^taii)) 2 = ||av| 2 - 

We have H r \ip t ree) — 0. Therefore, we can apply Lemma [11)1 with v = r and \iptree) instead of 
\ip), obtaining a state \ip') € S' rfi C S' H Q . We let |^' ree ) = \ip tree ) + \ip') and |^' M ) = \ip) + W) = 

Wtree) + \tptail) ■ Then, 

mi\\ 2 = H'ree\\ 2 + l\*r\ 2 . 

We have Ps^Wm) = ^JCe)- From Lemma Efl 

lK re el| 2 <^ll^, 1 |< ree )||-&rK| 2 . 

This means that 

\Wmf+(br-^j |ar| a <if||P5., 1 |^)l|. 

If t = 2\VN~\, we have b r > | (this can be verified by substituting the definition of b r ). 

Therefore, ||P5.,J<«)|| > M ^ t - . , . 

The balanced case is based on similar ideas but has some minor changes in the expressions 
that appear in Lemma ITDl (with the main change being K > 20N replaced by K > 307V d, which 
results in a bound of c = Q(jjj) instead of c= f2(^)). We discuss that in appendix [Dl 

Acknowledgments. I thank Richard Cleve and John Watrous for the discussion that lead 
me to discovering the main idea of the paper. 
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Appendix 



A Lemmas on the structure of minimal certificates 



Proof: [of Lemma [T] If w belongs to C, then C contains an extended minimal certificate for 
T w = which, by the argument before the statement of lemma [1] in section [5] (with w instead of 
v) must contain an extended minimal certificate for one of T yi — and T y2 = and an extended 



minimal certificate for one of T, 



!A"s 



and T y4 = 0. From the construction of extended minimal 

0. 



certificates, a certificate for T w — contains yi if and only if it contains a certificate for T y 



Proof: [of Lemma [2] Since H v has non-zero entries only in the places corresponding to the 
edges of T, the amplitude of each basis state \u) in H v \ipo) is just the sum of amplitudes of the 
neighbors of u in |^>o)j multiplied by the appropriate factors. We need to show that, for every 
u, this sum is 0. 

For vertices u in the subtree T v , if u is at an even depth 2Z, then its neighbors are at an 
odd depth (2l — 1 or 21 + 1) and their amplitudes are 0. If u is at an odd depth 21 + 1, let p 
be the parent of u and let y%, y2 be the two children of u. If p does not belong to C, than none 
of p's descendants belongs to C as well, including y\ and y<z. Then, all the neighbors of u have 
amplitude in |?/>o)- lip £ C, then by Lemma[T] exactly one of y\ and yi belongs to C . Assume 
that j/i G C. Let a be the amplitude of p. By equation (p}, the amplitude of yi is 

The amplitude of u in H v \ip) is 



2m u 



2m yi ymp~ 

a = 0. 



Proof: [of Lemma |3] 

Part (a). By induction on the depth of T v . If C v is a leaf, then m v — 1 and \\i/>c v II < 2\/T— 1. 
For the inductive case, decompose C v = {v}\JC yi UCy 2 . By eq. (HJ) and the inductive assumption, 
we have 

ll^cj| 2 <l + 



< 2, 



with the first inequality following from the inductive assumption, the second inequality following 




by rearranging terms and the third following from m yi — m y2 — ^ (since the tree is balanced). 

Part (b). By induction on the depth of T v . If C v is a leaf, then m v = d v = 1 and HV'aJI = 
1 < 2VT. 

For the inductive case, decompose C v — {v} U C yi U C y . 2 . By eq. ([1]) and the inductive 
assumption, we have 



ll^cj| 2 = l + 



2^/m^l 



l^c y J| 2 + 



2y / m 



y-2 



< 1 + - JL lyJm yi d yi + 



-_2y/m y2 d y2 = 1 + y/m v d yi + y/m v d y 



< 1 + 2\J m v (d v — 1) < — - + 2\J m v (d v — 1) < 2\J m v d v , 
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with the first inequality following from the inductive assumption, the second inequality following 
from dy x < d v — 1, d V2 < d v — 1, the third inequality following from d v < m« (the depth 
of a tree is always at most the number of leaves) and the fourth inequality following from 

Proof: [of Lemma|6] To prove t/i|Vci,C 2 ) — \ipd,c 2 )> we need to show H\ipc 1 ,c 2 ) = 0- Consider 
the amplitude of \u) in H\ipCi,c 2 ) ■ If u belongs to T Vl or T V2 , its amplitude in H\ipc 1 ,c 2 ) are 
by LemmaO If u = v, its amplitude in H\ipc lt C 2 ) is 




If u is outside T v , then it has no neighbors in T v , except for possibly v itself. That means that 
all of it's neighbors have amplitude in \tpCi,C 2 ) and the amplitude of \u) in H \ipCi,C 2 ) is 0. 

For U2, we have U2\ipCi,C 2 ) = |Vci,C 2 ) because the only leaves v with \v) having a non-zero 
amplitude in \ipCi,C 2 ) are those for which the corresponding variable Xi belongs to C\ or C2 and 
all the variables Xi in a certificate Cj have Xi = which means that U2\v) — \v). | 
Proof: [of Lemma [TTJ We prove the lemma for the general case. 

The proof is by induction. For the base case, let u be a vertex of depth 1 (i.e. at a distance 
1 from a leaf). Then, u is connected to a leaf w. Since w is a leaf, u is the only neighbor of w. 
This means that the amplitude of w in H\tp) is equal to H uw a u . Since H\ip) = and H uw 7^ 0, 
it must be the case that a u = 0. 

For the inductive case, assume that a u — for vertices u of depth 2i + l, for i € {0, ... ,1—1}. 
Let u be a vertex at the depth 21 + 1. Let c be one of the two children of u. Let v% and V2 be 
the children of c. Then, the amplitude of c in H \ip) is equal to H uc a u + H CVl a Vl + H CV2 a V2 and 
it must be equal to 0. By the inductive assumption, a Vl — a V2 = 0. Therefore, a u = 0. 

The proof for the vertices in the tail is similar, starting with the vertex that is adjacent to 
the end of the tail and proceeding inductively towards the root. | 

B Proof of Lemma [7] 

Similar statements have been proven before (e.g. [22) ) but none of them has the exact form that 
we need. Therefore, we include the proof for completeness. 

Let |^) be an eigenvector of U2U1 with an eigenvalue A. We consider the following possibil- 
ities: 

1. Ui\ip) — \ip). Then, is an eigenvector of U2U1 if and only if it is an eigenvector of Us- 
We cannot have U2\ip) — because, by the conditions of the lemma, ||-P(s 2 )i 1^)11 > 0- 
Since all eigenvalues of U2 are ±1, this means that L^IV') = an d C^filV') = — l^)- 

2. Ui\4>) = — \ip). Again, is an eigenvector of U2U1 if and only if it is an eigenvector of 
1/2- We cannot have E/2IV') = — l^) because, then \ip) would belong to S\ n ^2 and the 
lemma assumes that S\ n S2 — { }. Therefore, C^IVO = \ip) and U^Uilip) = — 

3. Ui\il>) 7^ |V) and C/xlV) 7^ 

Then, is not an eigenvector of U\. This means that and \ip') = Ui\ip) span a two 
dimensional subspace which we denote Ti.2- Since XJ\ — I, we also have \ip) = Ux\ip'). 
This means that U\ maps H2 to itself. U2 also maps H2 to itself, because it maps \if>') to 
U2W) = U 2 Ui\i(>') = A|V) and, since [7| = I, this means that U 2 \ip) = A" 1 ^')- 
Therefore, U2 and U% both map H.2 to itself. Let \ipn), \1pi2) be the eigenvectors of [/, 
in Ti.2- One of \1p11), |V ; i2) must have an eigenvalue that is +1 and the other must have 
an eigenvalue -1. (Otherwise, all of H2, including would be eigenvectors of U\ with 
the same eigenvalue and then we would have one of the first two cases.) Similarly, one of 
IV21)) IV22) must have an eigenvalue +1 and the other must have an eigenvalue -1. 
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For simplicity, assume that \ipii) and \1p21) are the eigenvectors with eigenvalue 1. Then, 
U2U1 is a composition of reflections w.r.t. \ipn) and \ip2i)- By the analysis in [Tj, the 
eigenvalues of U2U1 on H2 are e ±i/3 , where (3 is the angle between IV'ii) and \ifj2i)- We 
have 

ll^(S 2 )-|^ll)li 2 = K^ll|^22>| 2 = 

By the conditions of the lemma, we have sin 2 [3 > e which implies [3 € [-y/e, 

C Evaluating balanced trees: proof of Lemma [10 

Since a v and 6^ only depend on k, we will denote them and We first state some simple 
bounds on a*, and 

Claim 1 (aj a fc < 1.1 • 2 k+1 ; 
(b) h, •().!).#: 
fo| a fe < 0.136 fc ; 

Proof: The first two parts follow from 2^- < 2-^ = 0.1. The third part follows by 

a fc < 1.1 ■ 2 fc+1 < 0.11^ < 0.13fo fc , 

with the second inequality using K > 20N > 20 • 2 2k and the third inequality using part (b). 
I 

The proof of Lemma [TOl is by an induction on k. The basis case is k = 0. Then, the tree 
consists of the vertex v only. The only possible states \ip) are multiples of \v). v is also the 
only leaf, carrying a variable x\ and Tq(xi) — x\. If x\ = 0, then S x ,i is empty, meaning that 
L(i/j) = 1. If X\ = 1, then S x ,i consists of all multiples of \v), meaning that Ps x i \ip) — IV'} an( i 
L(ip) = —(K — 1). In both cases, the lemma is true. 

For the inductive case, let z\ and zi be the children of v, y\ and yi be the children of Z\ and 
?/3, ?/4 be the children of z^. We can decompose the state as 

|V>=a»|«) + |Vi> + l^a> 

where € S Zi .o- We claim 

Claim 2 For every i <E {1,2}, there exists |"0i) £ S' z . such that, for the state — \ipi) + 
we have 

1. If T Zl (xi, . . . ,xn) = 0, then 

\wi\ 

2. IfT Zl (xi,...,x N ) = l,then 

w 

Proof: For typographical convenience, let i = 1. For the first part, T Zl = if and only if 

T = T =1 
yi ± y-2 ± - 

By Lemma ITT1 the amplitude of \z,j) in | ) is 0. Therefore, we can decompose 

l^l) = + |^2>, 



\p x M)\\<-^\^?- 



(2) 



\p.,iWD\\<%AM- 



(3) 
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with \tpi) £ S Vi fi. By the inductive assumption, there exist states \ {tp^} G S y . such that, 
for the states \<ff!) = \<fi) + \(p{), we have 

Wi\\ 2 -\\Ps.Jtf)f ^-h-iM*, ( 4 ) 

with a Vi being the amplitude of g/$ in \<fi). We define \ipi) = 1^) + |(/?' 2 ) and |^") = |-0x) + Wi)- 
By summing equations ([4]) for z = 1 and i = 2, we get 

2 

IKIlMl^alV40ll 2 <-& fe -iEK*l 2 - ( 5 ) 

<=i 

Because of ot Wl + a a2 + a v — 0, we have |a ai | 2 + |a B2 1 2 > ^ ■ Therefore, ([5]) implies 

M\\ 2 -\\Ps*M)\\ 2 <- bj ^\a v \ 2 . 
For the second part, we consider two cases: 

l- 2/1=2/2 = 0. 

Let C be a minimal 0-certificate for r = 1 and |-0c) be the state corresponding to this 
certificate. Let = J2u a ^\ u )- We define 

Let + = J2 V Pv\v). Then, /3 W = (3 V2 = " yi ^""" 2 ■ Because of a ai + a a2 + a v = 0, 
we have j3 Vl = (3 V2 = — 
We decompose 

|V>l) + |0l) = IvO + 1^2), 
with |<pi) being a superposition over T Vi . By the inductive assumption, there exist states 
Wi)i W2) G 5ij,o such that, for the states |y>") = \<fi) + we have 

Mf - \\Ps,M)f ^ a k-M Vi \ 2 . (6) 

We define |i/>i) = \4>i) + \<p'x) + W 2 ) and \tj/{) = + |V4)- Summing up eq. © for j = 1, 2 
gives 

ll^i'll 2 - \\Ps x M)f < « fe -i(|/? yi | 2 + \Py 2 \ 2 ) = ^\a v \ 2 . 
The claim now follows from dk-i < flfc — 1 which is easy to prove. 
2. one of j/i, j/2 is and the other is 1. 

For typographical convenience, assume that y\ = 0, y% = 1. Once again, we decompose 

l^i) = ki) + 1^2), 

with \ipi) being a superposition over T Vi . By the inductive assumption, there exist states 
W2) e Sh.o such that, for the states \ip'() — |</5,-) + \<pi), we have (0} for i = 1 and (J6]) 
for i — 2. We define |^) = 1^) + 1^), = + \tp[) and sum up the equations from 
the inductive assumption. This gives us 

ii^'ir-ii^Koir^^iKj'-^-iKj 2 . (?) 

Let I 

1 — ^Ic^u I ■ Then, because of a yi + a y2 + a v — 0, we have \a yi | < (1 + S)\a v \. We 
now upper-bound the expression 

a k -i\a yi \ 2 - fofc-i |ct y2 1 2 < fflfc_i(l + f^) 2 !^! 2 - frfc^iJ 2 !^! 2 . 
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Let /(<5) = o fe _i(l + <5) 2 - bk-xd 2 . Then, f{8) = 2(1 + S)a k -! - 2Sb k -x. The maximum 
of f(S) is achieved when f'(S) = which is equivalent to 5(a,k-i — &fe-i) = — Ofc-i and 
-. Then, 



bfc-i-Ofe-i ' 



2 / 2 



/(<5) = a fe _i - . , 

Ofe-i — afc-i/ V°fc-i — a fc-i/ Ofc-i ~ a fc-i 



This means that 



Ofe-l — Ofc-1 



To complete the case, it suffices to show 

dk-ibk-i 



bk-i — ctfc-i 

We have 



1 < a fe . (8) 



2t =21 + a fe _i < 2 1 + a fe _i 

6fe_i-a fc _i V o fe _i-a fc _i/ V 0.870 fe / 

/ 1.1-2* \ / 2 2fe -!\ 

< 2 H a fe _i < 2 1 + 1.41 a fe _i 

- ^ 0.87-0.9^ J ~ \ K J 

< 2 1 + 2.82— ( 1 + 2-^J (2 fe - 1) < 1 + 2- (2 fe+1 - 2), (9) 

with the first inequality following from parts (a) and (c) of Claim [T] the second inequality 
following from part (b) of Claim [U the fourth inequality following by writing out dk-i and 
the last inequality following from (1 + 2(5) (1 + 2.82(5) < 1 + 8<5 (where S = 2 K ) being true 
for sufficiently small S. The equation ([5]) now follows by adding 1 to both sides of eq. ©• 

To deduce lemma ITU1 from claim [21 we define 

Let \ip") = + \ip'). Then, we also have 

|V>"> = or„|«> + W() + Wi). 

If T r = 0, then T Zl = T Z2 = 1. By summing up eq. for i = 1, 2 and adding |a„ | 2 to both 
sides, we get 

\W\\-\\P x ,i\i>")\\<ak\a v \ 2 . 
If T r = 1, then we again have two cases: 

1. T Z1 =T Z2 = 1. 

By summing up eq. (JH) for i = 1, 2 and adding |a„ | 2 to both sides, we get 

M - l|P*,i|V>">ll <-(& fe -i-i)KI 2 . 

The lemma follows from b^-i — 1 > bk which is easy to prove. 

2. one of Zi, is and the other is 1. 

For typographical convenience, assume that z\ = 0, z% = 1. In this case, claim [5] gives us 

bk-i — a-k — 1 1 _ ,2 



||V"H-||^,ilV/')ll<- — - \a 

we need tc 

the expressions for a k , &fc_i and 6 



To complete the proof, we need to show that bk 1 „ ak — - > b k . This follows by substituting 
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D General case 

The counterpart of Lemma IT01 is 

Lemma 12 Let K = 30Nd. For v £ T, define S v = 5m ^^ + Jh= j where d v is the depth of 
the subtree T v . For any v of even depth and any state \ip) £ S Vi q, there exists a state \ip') £ S' v 
such that, for = + \il>'), we have 

1. IfT v (xi, . . . ,xn) — 0, then 



L v (tp)<a v , a v — 2(1 + S v ) y/d v m v . 
2. IfT k (xi,...,XN) = l, then 

L v (ip)<-b v , b v = (1 - 5 v )-^=. 



Observe that, because of m, < N and d v < d < N, we always have 

5NVd d 5 11 

$v < 1 7= < 1 = -■ 

~ 30Nd 30VdN ~ 30 30 5 

Proof: By induction on the depth I of the subtree T v . The basis case is I = 0. Then, the 
tree consists of v only. The only possible states \ijj) are multiples of \v). The root is also the 
only leaf, carrying a variable Xi and T v {x{) — Xj. If x, = 0, then S Xj i is empty, meaning that 
L v (ip) = 1. If Xi = 1, then S x i consists of all multiples of |r), meaning that Ps x ± \ip) = \ip) and 
L v (tp) = — (K — 1). In both cases, the lemma is true. 

For the inductive case, let z\ and Z2 be the children of v, y\ and yi be the children of z\ and 
2/3,2/4 be the children of z 2 . We can decompose the state as 

|V) = a v \v) + + |V*) (10) 
where \ipi) is a superposition over \u),u £ T Zi . We claim 

Claim 3 For every i £ {1, 2}, there exists |?//) £ S' z . , such that, for the state \ip'i) = IV'J + lV'i'); 
we have 



1. IfT Zl (xi, . . . ,xjv) = 0, i/ien 



IKI| 2 -Il^,i|^)l| 2 <^l^«,| 2 . (11) 

2. IfT Zl (x 1 ,...,x N ) = l,then 

Un 2 -\\P*M)\\ 2 <^=\Hv W av\ 2 . (12) 

Proof: For typographical convenience, let i = 1. By Lemma [TT1 the amplitude of z\ in |^i) is 
0. Therefore, we can decompose 

IV>l) = l^l) + |V2>, 

with being a superposition over T Bi . 

For the hrst part, T Zl = if and only if T yi — T V2 = 1. By the inductive assumption, there 
exist states \lp[) £ S' yi , \ip' 2 ) ££ S'y 2 ,o sucn that, for the states \<p") = \tpi) + \ip'j}, we have 

M\\ 2 -\\Ps,M)\\ 2 <-b yi \a yi \ 2 , (13) 
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with oty i being the amplitude of yi in \ifi) (which is the same as its amplitude in We 

define = \ f'i) + W2) an d \i>'{) = + Wx)- By summing equations (fT3|) for i = 1 and 

i = 2, we get 

U"\\ 2 -\\Ps x M)W 2 <-X>*KI 2 - (14) 

i=l 

We would like to upperbound the right-hand side of this equation. From H = 0, we have 

H VlZl a yi + H V2Zl a y2 + H VZl a v = 0. (15) 

Define Xi = — H ^ iZ1 ^ Vi ■ Then, by dividing both sides of (fTS")) by —H VZl a v , we have x\ + x 2 = 1. 
By expressing a Vi in terms of Xi, we get 

2 2 

i=i i=i 



< -i^^i^i-^jE 



I j 



V2r. 



where the last inequality follows by writing out b Vi and H ViZl and applying S Vi < S Zl (which is 
true because both the size and the depth of T Vi are less than the size and the depth of T Zl ) . To 
complete the proof, it suffices to show that 

M + M>_L, (16) 

iD/y-y "^lyi '""zx 

subject to the constraint X\ + x 2 = 1. The left hand side of (|16p is minimized when x\ and x 2 
are both real. (Otherwise, one can replace x\ and x 2 by x' x — |^~nq^i an d x' 2 = \ X }\+\ X2 \ an d 
this does not increase the left hand side.) Therefore, we can find the minimum of the left hand 
side of (fT6|) by substituting x 2 — 1 — x\ and taking the derivative of the left hand side. That 
shows that the left hand side is minimized by x\ = — — rr- — , x 2 = — ^rh, — • Then, it is equal 

" TTly-^ ~\- Illy 2 771. -\-TYly2 

to 1 = 

For the second part, we consider two cases: 

1- yi = D2 = 0. 

Let C\,C 2 be extended minimal certificates for T yi = and T y2 — 0, respectively and 
7 = J^lT°" We define 

l<Pi) = Ivi) + 7v / "VlV , Ci)- 

We define \(p 2 ) similarly, with - sign in the front of ^/TOj, 2 |-0c 2 ). We then apply the inductive 
assumption to the states | <£>»), obtaining \ip[), \(p' 2 ) such that for \y>") = \<fi) + |<^), we have 

Wit -\\Ps*M)T <<hM 2 > (17) 

where /3 vt is the amplitude of yi in \<pi). We define 

w l ) = y l ) + y 2 )+i\^ Cl .,c 2 ) 

and let |V>i) = \ip\) + Then, by summing equations (fT7|) . we get 

HU 2 ~ \\Ps*M\\ 2 < a Vl \P Vl \ 2 + ayM 2 - (18) 
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By our choice, we have (3 yi — (3 V2 . Since H\ip) — and H\ip'} — 0, we have H\ip") = 0. 
By writing out the amplitude of \zi) in H\ip"), we get 



Therefore, 

A/i = fly 2 = ' 
By substituting that into (fT5| . we get 

ll^l 2 HI^JV+)ll 2 < 

We now expand the coefficient of \H ZlV a v \' 



Hy x zi + Hy 2Zl 



Hy 2 zi) 



2 I Hziv^v I • 



VJl ' u y2 



{Hy 1Z l + Hy 2Z1 )' 



< 2(1 + S Z1 ) 



V 2 



< -^2(1 + ^)^'"' 



zi"«zi / n 2 



< ^=2(1 + ^)^1^1- 

2. one of j/i, j/2 is and the other is 1. 

For typographical convenience, assume that y\ = 0, = 1- By the inductive assumption, 
there exist states \<fi), \ip' 2 ) & Sh,o such that, for the states = \<pi) + |<^), we have 



ikii -n^,.ii^>ir<cKj^, 

with c = a yi for i = 1 and c = — b V2 for i = 2. We define |^) = |<^) 
I?/"") = iV'l) + By summing the equations (fT§)) , we get 

IKT - ll^.i K) II 2 < a,iK| 2 - b V2 \a V2 \ 2 . 

We switch to variables Xi = — , obtaining 

Wit- \\p 8 . a K)ll 2 <l^i«,l 2 



"3/1 



ff 2 

yizi 



y2 'x 2 | 2 



H 2 

V2Z1 



Substituting the expressions for a yi ,b V2 , H yiZl , H V2Zl gives 



# 2 



kil 2 " 
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(19) 

l^2> and 

(20) 



(21) 



with the second inequality following by rearranging terms and applying 1 — S V2 > I > 



1(1 + 5^) which is true because of 5 Vl < | and 5 y2 < |. 
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Let 5 = | x% | . Then \xi\ < 1 + S and the right hand side of (f2Tj) is at most 



-^=2(1 + 8 yi )^d yi m zi I (1 + 5) 2 - 



A" 



3\/d yi m y2 



Taking the derivative w.r.t. S shows that the expression in the brackets is maximized by 

3 \ d v , Tti Vo 



5 = 



in which case it is equal to 



(l + S yi ) 



K 



K .To complete the proof, we observe that 
(1 + 6 m )3y/d^m y2 



K — 3^/dy~m V2 



1 + 5, 



!J1 



K — 3 */ d yi m y2 



< 1 + ^+4^^ <l + ^+4V^£<l + ^, 

with the first inequality following from (5 yi < ^ and A" — d y2 m y2 > K — 3N\/d < |g_K\ 
To deduce lemma [T2l from claim [31 we define 

W) = Wx)+m- 

Because of equation (TTU)) , we can also express \ip") = \ip) + \if>') as 

W) = «» + Wl) + K>. 

If T r = 0, then T Zl = T Z2 = 1. By summing up eq. (fT2|) for i = 1, 2 and adding |a„| 2 to both 
sides, we get 

1 2 



H"\\ 2 - \\P x aW')\\ 2 < (^=Ht Zi + ^H 2 VZ2 + l) \a v \ 
By expanding a Zi and H VZi , we get 



(22) 



^Hl i + ^Hl 2 +!<(! + 5 V ) 



m zl wd Zl m Z2X /d Z2 



>m v 



Since m v = m Zl +m Z2 , we have -j= 
1, this implies 



2 m 1; 



/m v . Together with d v — max(d 2l , d z 



m Zl ^/d Zl + m Z2 ^d Z2 + i ^ ^— — — + 2 



. > rj tt . V™^ , 2\Jd v (d v - 1) + 1 

< \Jm v {d v — 1) H 7= = Vto-u 



.2d,, 



< ^/ro^^^z = 2\/m v d v , 



with the second inequality following from c?^ < m„ (the depth of any tree is at most the number 
of leaves in it) and the last inequality following from \J d v (d v — 1) < d v — 4 . 
If T r = 1, then we again have two cases: 
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1. T Z1 = T Z2 = 1. 



By summing up eq. (fTTj) for i = 1, 2 and adding |a„| 2 to both sides, we get 



.v/2 72 
By expanding b Zi and H„ Zi and simplifying, we get 
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> 2(l-* ). 
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1 > (1 - £„) 
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2. one of zi, 22 is and the other is 1. 

For typographical convenience, assume that z\ = 0, z% = 1. In this case, claim [3] gives us 



"II 2 



We have 



_£1 ff 2 
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^ fl* + 1 < -(1 - 5 Zl )4= + 2(1 + S Z2 )^^ 



To prove that this is at most —b v , we need to show that 
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This follows from 



(£„ —S Zl )- 
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K / 5 5m zi y/ d zi d Zl 
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> 



1 



/ 5m Z2 y/d^ 

V K y/K J y/W7 

>2(1 + S Z2 ) 



K hm Z2 y'd Z2 



K 



/m v 



th Z2 \J d Z2 



The first equality follows by writing out S v and 5 Z1 , the next inequality follows from m v = 
m zi + m Z2 and d v > d Zl and the last inequality follows from 5 Z2 < g and m v < N < 

This completes the proof of Lemma Q21 | 

The general case of Lemma [9] now follows from Lemma [12] in the same way as the balanced 
case of Lemma |H] followed from Lemma [TO] 

Distinction between balanced and general case. There are two reasons why our bound 
for the general case has 0(y/ Nd) instead of 0(y/~N) for the balanced case: 

1. Z\ = 0, z% = 1 case of the proof of Lemma 1121 which requires having y 'd v m v instead of 
y/m v . (The rest of the proof of Lemma [T2l would still work with y/m v .) 



2. For the T — case, lemma [3] has 0(v 'm v d v ) in the general case and 0(y/m v ) in the 
balanced case. 
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